In this modified version of the mailform an additional method for detecting spam bots has been implemented. It is based on a magic word / word challenge test. This means you can have a mailform without image captcha yet it is not left totally unprotected against spam bots.

DMARC Policy Impacts

DMARC - Domain-based Message Authentication, Reporting & Conformance.

When Yahoo implemented DMARC policy changes in April 2014 it caused quite a stir in the email deliverability community. Yahoo changed its DMARC policy to proactively protect its users from increasing email forgery spam. This step helped to secure a user’s email identity from being used by unauthorised senders. Yahoo's changes tell other DMARC compliant systems to reject mail from Yahoo users that isn’t genuinely originating from a Yahoo server. Other email providers followed the example.

Q: What does this mean for the humble site contact form?

A: Many mailforms do not pass current DMARC practises so they will not deliver email reliably. Why? The email address provided by the person sending a form is often included in the FROM field of the sent email. This is never meant to happen as DMARC rules can prevent the message from being delivered. To deliver email reliably, it is important that we can define an email address which we control and on the domain where the form is hosted, as the email address used in the FROM field.

Version Notes

From version 1.4g fancy URL's and domain name extensions of up to 12 digits, such as .photography, are supported.